Native Qualification Failure And Recovery

Native Qualification Failure And Recovery

Failure	Required result
Vendor hash/signature mismatch, untrusted share, or NSIS step failure	Nonzero installer result and persistent private step log; no grant expansion, capture start, or success-shaped receipt.
Guest/VM UUID, storage, NAT source, Actor revision, or contract mismatch	Refuse before evidence admission; never substitute a similarly named VM or broaden the firewall/relay allowlist.
Missing, stale, reordered, partial, gapped, or over-budget capture data	Mark the trial incomplete; no inference/action from unverified evidence and no retry of an ambiguous operation.
Model digest, schema, deadline, stream, or local-only policy mismatch	Abort the session and remaining broker authority; no remote fallback or second action.
UI acknowledgement or capture stop outcome is unknown	Preserve actionOutcomeUnknown/incomplete status; do not claim rollback, acceptance, or correctness and do not replay the action.
Teardown request is accepted but VM remains running	The one-shot teardown remains consumed; any forced power-off requires a separate explicit operator authorization bound to that exact UUID.